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This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims: 

1 . (Previously Presented) A method for accessing data in a read/write storage 
medium within one of a plurality of storage cartridges mounted into a plurality of interface 
devices, comprising: 

providing an association of at least one coding key to the plurality of storage cartridges; 
encrypting, by a host device, the coding key; 

storing, by one of the plurality of interface devices, the encrypted coding key in at least 
one of the storage cartridges; 

receiving, by a receiving interface device comprising one of the plurality of interface 
devices, an Input/Output (I/O) request to a target storage cartridge comprising one of the 
plurality of storage cartridges; 

mounting, by the receiving interface device, the target storage cartridge in response to the 
I/O request; 

reading, by the receiving interface device, the encrypted coding key from the mounted 
target storage cartridge; 

transmitting, by the receiving interface device, the read encrypted coding key to the host 

device; 

producing a re-encrypted coding key by decrypting the transmitted encrypted coding 
key by the host device and re-encrypting the coding key by the host device with the public key of 
the receiving interface device; 

transmitting by the host device the re-encrypted coding key to the receiving interface 

device; 

receiving, by the receiving interface device, the re-encrypted coding key; 
decrypting, by the receiving interface device, the re-encrypted coding key; 
performing a read or write operation in response to the I/O request by decoding read or 
coding write data using the decrypted re-encrypted coding key 
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2. (Canceled) 

3. (Currently Amended) The method of claim 1, wherein the association of the at 
least one coding key to the plurality of storage cartridges associates one key with the plurality of 
storage cartridges, wherein the one key encodes data written to the storage mediums and decode 
decodes data read from the storage mediums of the plurality of storage cartridges. 

4. (Original) The method of claim 1 , wherein the association of the at least one 
coding key to the plurality of storage cartridges associates a different key with each storage 
cartridge, wherein the key associated with one storage cartridge is used to encode data written to 
the storage medium and decode data read from the storage medium of the storage cartridge. 

5. (Original) The method of claim 1, wherein the coding key comprises a seed value 
that is used to generate an additional key that is used to directly decode and encode the data in 
the storage medium in the storage cartridge. 

6. (Canceled) 

7. (Previously Presented) The method of claim 1 , wherein encrypting the coding key 
further comprises: 

encrypting, by the host device, the coding key with a first key, wherein the interface 
devices use a second key to decrypt the coding key encrypted with the first key. 

8. (Previously Presented) The method of claim 1 , wherein encrypting the coding key 
further comprises: 

encrypting the coding key with a first key, wherein the host device uses a second key to 
decrypt the coding key encrypted with the first key, wherein the host device re-encrypts the 
coding key by re-encrypting the coding key with a third key, wherein the interface devices uses a 
fourth key to decrypt the re-encrypted coding key encrypted by the host device with the third 
key. 



3 of 14 



Serial No. 09/977,159 
Docket No. TUC920010022US1 
Firm No. 0018.0092 

9. (Canceled) 

10. (Currently Amended) A method performed by an interface device for accessing 
data in a removable storage cartridge including a read/write storage medium coupled to the 
interface device, comprising: 

receiving an encrypted coding key encrypted by a host device; 

providing an association is provided of at least one coding key to a plurality of storage 
cartridges; 

storing by the interface device the encrypting coding key in at least one of the storage 
cartridges; 

receiving an Input/Output (I/O) request directed to a target storage cartridge; 
mounting by the interface device the target storage cartridge in response to the I/O 
request; 

reading by the interface device the encrypted coding key from the mounted target storage 
cartridge; 

transmitting by the interface device the read encrypted coding key to the host device; 

producing by the interface device a re-encrypted coding key by receiving from the host 
device a re-encrypted coding key comprising the transmitted encrypted coding key decrypted and 
then encrypted by a public key of the interface device; 

decrypting the re-encrypted coding key; and 

performing by the interface device a read or write operation in response to the I/O request 
by decoding read or coding write data using the decrypted re-encrypted coding key. 

1 1 . (Previously Presented) The method of claim 10, wherein encoding the data with 
the coding key compresses the data and wherein decoding the data written to the storage medium 
decompresses the data, and wherein the data is only encoded or decoded using the coding key. 

12. (Previously Presented) The method of claim 10, wherein the coding key is 
encrypted by a first key maintained at the host device, further comprising; 
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maintaining, by the interface device, a second key to decrypt data encrypted using the 
first key, wherein the interface device uses the second key to decrypt the coding key encrypted 
with the first key. 

13. (Original) The method of claim 12, wherein the second key is stored in an 
integrated circuit non- volatile memory that is only accessible to decrypting logic that uses the 
second key to decrypt data encrypted using the first key. 

14. (Original) The method of claim 13, further comprising: 

transmitting the coding key decrypted using the decrypting logic to encoder/decoder 
logic, wherein the encoder/decoder logic uses the coding key to encode and decode data to the 
storage medium. 

15. (Original) The method of claim 12, further comprising: 

storing the coding key encrypted with the first key within the storage cartridge; 
receiving an input/output (I/O) request directed to the storage cartridge; and 
accessing the encrypted coding key from the storage cartridge, wherein the accessed 
coding key is decrypted using the second key, and wherein the decrypted coding key is used to 
encode and decode data to execute the I/O request to the storage cartridge. 

16. (Previously Presented) The method of claim 10, wherein the received encrypted 
coding key is encrypted by a first key maintained at the host device, wherein the host device 
maintains a second key to decrypt data encrypted using the first key, wherein the interface device 
decrypts the encrypted coding key by: 

receiving, with the I/O request, from the host device, the second key encrypted by the 
host device using a third key, wherein data encrypted using the third key is decrypted using a 
fourth key; 

accessing the fourth key; 

using the fourth key to decrypt the encrypted second key received from the host device; 

and 



5 of 14 



Serial No. 09/977,159 
Docket No. TUC920010022US1 
Firm No. 0018.0092 

using the decrypted second key to decrypt the received coding key encrypted using the 
first key. 

17-43. (Canceled) 

44. (Previously Presented) The method of claim 1, wherein the storage cartridges 
comprise tape media and the data on the storage cartridges coded and decoded using the at least 
one coding key comprises archival data. 

45. (Previously Presented) The method of claim 8, wherein the first key comprises a 
host public key, wherein the second key comprises a host private key, wherein the third key 
comprises an interface device public key and wherein the fourth key comprises an interface 
device private key. 

46. (Previously Presented) The method of claim 16, wherein the first key comprises a 
host public key, wherein the second key comprises a host private key, wherein the third key 
comprises an interface device public key and wherein the fourth key comprises an interface 
device private key. 

47. (Previously Presented) A system for accessing data in a read/write storage 
medium within one of a plurality of storage cartridges and to communicate with a host device, 
comprising: 

an interface device having a controller for performing operations, the operations 
comprising: 

receiving an Input/Output (I/O) request to a target storage cartridge comprising 
one of the storage cartridges, wherein at least one coding key encrypted by the host 
device is associated with the plurality of storage cartridges, wherein the coding key 
associated with the storage cartridge is used to decode and code data in the storage 
cartridge, and wherein encrypted coding keys are stored in the storage cartridges; 

mounting the target storage cartridge in response to the I/O request; 

reading the encrypted coding key from the mounted target storage cartridge; 
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transmitting the read encrypted coding key to the host device; 

receiving, from the host device, a re-encrypted coding key produced by the host 
device by decrypting the transmitted encrypted coding key and re-encrypting the coding 
key with the public key of the interface device; 

decrypting the re-encrypted coding key encrypted; and 

performing a read or write operation in response to the I/O request by decoding 
read or coding write data using the decrypted re-encrypted coding key. 

48. (Currently Amended) The system of claim 47, wherein the association of the at 
least one coding key to the plurality of storage cartridges associates one key with the plurality of 
storage cartridges, wherein the one key encodes data written to the storage mediums and decode 
decodes data read from the storage mediums of the plurality of storage cartridges. 

49. (Previously Presented) The system of claim 47, wherein the association of the at 
least one coding key to the plurality of storage cartridges associates a different key with each 
storage cartridge, wherein the key associated with one storage cartridge is used to encode data 
written to the storage medium and decode data read from the storage medium of the storage 
cartridge. 

50. (Currently Amended) The system of claim 47, wherein encrypting the coding key 
further comprises: encrypting, by the I/O manage^ encrypts the coding key with a first key, and 
wherein the controller use uses a second key to decrypt the coding key encrypted with the first 
key. 

5 1 . (Previously Presented) The system of claim 47, wherein encrypting the coding 
key further comprises: encrypting the coding key with a first key, wherein the I/O manager uses 
a second key to decrypt the coding key encrypted with the first key, wherein the I/O manager 
encrypts the coding key by encrypting the coding key with a third key, wherein the controller 
uses a fourth key to decrypt the coding key encrypted by the host with the third key. 
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52. (Previously Presented) The system of claim 47, wherein the storage cartridges 
comprise tape media and the data on the storage cartridges coded and decoded using the at least 
one coding key comprises archival data. 

53 . (Previously Presented) The system of claim 5 1 , wherein the first key comprises a 
host public key, wherein the second key comprises a host private key, wherein the third key 
comprises an interface device public key and wherein the fourth key comprises an interface 
device private key. 

54-60. (Canceled) 

61 . (Currently Amended) An article of manufacture comprising at least one of a 
computer readable media and hardware including an Input/Output (I/O Manager) and controller 
for accessing data in a read/write storage medium within one of a plurality of storage cartridges 
mounted into a plurality of interface devices, wherein the controller and I/O manager are 
executed to perform operations, the operations comprising: 

providing, by the I/O manager, an association of at least one coding key to the plurality of 
storage cartridges; 

encrypting, by the I/O manager, the coding keys; 

storing, by the controller, the encrypted coding keys in at least one of the storage 
cartridges; 

receiving, by the controller, an Input/Output (I/O) request to a target storage cartridge 
comprising one of the storage cartridges; 

mounting, by the controller, the target storage cartridge in response to the I/O request; 

reading, by the controller, the encrypted coding key from the mounted target storage 
cartridge; 

transmitting, by the controller, the read encrypted coding key to the I/O manager; 

producing, by the I/O manager, a re-encrypted coding key by decrypting the transmitted 
encrypted coding key and re-encrypting the coding key with the public key of the interface 
device 

transmitting, by the I/O manager, the re-encrypted coding key to the controller; 
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receiving, by the controller, from the I/O manager host device , the re-encrypted coding 

key; 

decrypting, by the controller, the coding key the re-encrypted coding key; and 
performing a read or write operation in response to the I/O request by decoding read or 
coding write data using the decrypted re-encrypted coding key. 

62. (Currently Amended) The article of manufacture of claim 6 1 , wherein the 
association of the at least one coding key to the plurality of storage cartridges associates one key 
with the plurality of storage cartridges, wherein the one key encodes data written to the storage 
mediums and decode decodes data read from the storage mediums of the plurality of storage 
cartridges. 

63 . (Previously Presented) The article of manufacture of claim 6 1 , wherein the 
association of the at least one coding key to the plurality of storage cartridges associates a 
different key with each storage cartridge, wherein the key associated with one storage cartridge 
is used to encode data written to the storage medium and decode data read from the storage 
medium of the storage cartridge. 

64. (Previously Presented) The article of manufacture of claim 61, wherein the coding 
key comprises a seed value that is used to generate an additional key that is used to directly 
decode and encode the data in the storage medium in the storage cartridge. 

65. (Previously Presented) The article of manufacture of claim 61, wherein 
encrypting the coding key further comprises: 

encrypting, by the I/O manager, the coding key with a first key, wherein the controller 
uses a second key to decrypt the coding key encrypted with the first key. 

66. (Previously Presented) The article of manufacture of claim 61, wherein 
encrypting the coding key further comprises: 
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encrypting the coding key with a first key, wherein the I/O manager uses a second key to 
decrypt the coding key encrypted with the first key, wherein the I/O manager encrypts the coding 
key by encrypting the coding key with a third key, wherein the controller uses a fourth key to 
decrypt the coding key encrypted by the I/O manager with the third key. 

67. (Previously Presented) The article of manufacture of claim 61, wherein the 
storage cartridges comprise tape media and the data on the storage cartridges coded and decoded 
using the at least one coding key comprises archival data. 

68. (Currently Amended) An article of manufacture comprising at least one of a 
computer readable media and hardware including a controller in an interface device for accessing 
data in a read/write storage medium within one of a plurality of storage cartridges mounted into a 
plurality of interface devices and for communicating with host devices, wherein the controller is 
executed to perform: 

receiving an encrypted coding key encrypted by the host device, wherein at least one 
coding key encrypted by the host device is associated with the plurality of storage cartridges, 
wherein the coding key associated with the storage cartridge is used to decode and code data in 
the storage cartridge, and wherein encrypted coding keys are stored in the storage cartridges; 

receiving an Input/Output (I/O) request directed to a target storage cartridge comprising 
one of the storage cartridges; 

mounting the target storage cartridge in response to the I/O request; 

reading the encrypted coding key from the mounted target storage cartridge; 

transmitting the read encrypted coding key to the host device; 

receiving from the host device a re-encrypted coding key produced by the host device by 
decrypting the encrypted coding key decrypted and re-encrypting the decrypted coding key with 
the public key of the interface device; 

decrypting the re-encrypted coding key; and 

performing a read or write operation in response to the I/O request by decoding read or 
coding write data using the decrypted re-encrypted coding key. 
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69. (Previously Presented) The article of manufacture of claim 68, wherein encoding 
the data with the coding key compresses the data and wherein decoding the data written to the 
storage medium decompresses the data, and wherein the data is only encoded or decoded using 
the coding key. 

70. (Previously Presented) The article of manufacture of claim 68, wherein the coding 
key is encrypted by a first key maintained by the I/O manager, wherein the operations further 
comprise: 

maintaining, by the controller, a second key to decrypt data encrypted using the first key, 
wherein the interface device uses the second key to decrypt the coding key encrypted with the 
first key. 

71 . (Previously Presented) The article of manufacture of claim 70, wherein the second 
key is stored in an integrated circuit non- volatile memory that is only accessible to decrypting 
logic that uses the second key to decrypt data encrypted using the first key. 

72. (Previously Presented) The article of manufacture of claim 71, wherein the 
operations further comprise: 

transmitting, by the controller, the coding key decrypted using the decrypting logic to 
encoder/decoder logic, wherein the encoder/decoder logic uses the coding key to encode and 
decode data to the storage medium. 

73. (Previously Presented) The article of manufacture of claim 70, wherein the 
operations further comprise: 

storing, by the controller, the coding key encrypted with the first key within the storage 
cartridge; 

receiving, by the controller, an input/output (I/O) request directed to the storage cartridge; 

and 

accessing, by the controller, the encrypted coding key from the storage cartridge, wherein 
the accessed coding key is decrypted using the second key, and wherein the decrypted coding 
key is used to encode and decode data to execute the I/O request to the storage cartridge. 
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74. (Previously Presented) The article of manufacture of claim 68, wherein the 
received encrypted coding key is encrypted by a first key maintained by the I/O manager, 
wherein the I/O manager maintains a second key to decrypt data encrypted using the first key, 
wherein the controller decrypts the encrypted coding key by: 

receiving, with the I/O request, from the I/O manager he second key encrypted by the I/O 
manager using a third key, wherein data encrypted using the third key is decrypted using a fourth 
key; 

accessing the fourth key; 

using the fourth key to decrypt the encrypted second key received from the I/O manager 

and 

using the decrypted second key to decrypt the received coding key encrypted using the 
first key. 

75. (Previously Presented) The article of manufacture of claim 74, wherein the first 
key comprises a host public key, wherein the second key comprises a host private key, wherein 
the third key comprises an interface device public key and wherein the fourth key comprises an 
interface device private key. 
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